{ "type": "URL", "indicator": "https://vendamaiscomthiago.ads360imob.com.br/", "general": { "sections": [ "general", "url_list", "http_scans", "screenshot" ], "indicator": "https://vendamaiscomthiago.ads360imob.com.br/", "type": "url", "type_title": "URL", "validation": [], "base_indicator": { "id": 4161221133, "indicator": "https://vendamaiscomthiago.ads360imob.com.br/", "type": "URL", "title": "", "description": "", "content": "", "access_type": "public", "access_reason": "" }, "pulse_info": { "count": 50, "pulses": [ { "id": "691b8869e00b107fa20d9482", "name": "ThreatFix", "description": "ThreatFix is an effort to publish various details about ransomware variants and ransomware threat actors. ThreatFix advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect against ransomware.", "modified": "2026-01-23T11:01:07.175000", "created": "2025-11-17T20:41:11.797000", "tags": [ "", "ransomware", "malware" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "", "display_name": "", "target": null } ], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "zlepos384", "id": "103244", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 8010, "FileHash-SHA1": 7922, "FileHash-SHA256": 8893, "URL": 57004, "domain": 36018, "hostname": 96473 }, "indicator_count": 214320, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "131 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693e45938d431f40d5e0fe1a", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 144 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T05:03:31.755000", "created": "2025-12-14T05:05:23.154000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "domain": 9, "hostname": 6 }, "indicator_count": 91, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693e0d4b455894d98940e5b2", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 141 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T01:02:59.421000", "created": "2025-12-14T01:05:15.004000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dff42b301040a8b4afc64", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 143 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T00:05:56.401000", "created": "2025-12-14T00:05:22.280000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693de31c8d706fb0a8d9cbbf", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T22:01:57.329000", "created": "2025-12-13T22:05:16.726000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dd50b82d3a9426de10a97", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T21:02:35.560000", "created": "2025-12-13T21:05:15.469000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693cd7ef8e8a9a68b2dd786f", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 225 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T03:00:26.732000", "created": "2025-12-13T03:05:19.234000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "142 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c757d86870325ab95fca5", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 244 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T20:05:23.417000", "created": "2025-12-12T20:05:17.867000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4b4f02bc250f546de8ca", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 243 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T17:00:19.427000", "created": "2025-12-12T17:05:19.140000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c32a16bf837f7b07a53b6", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(205), Unknown Stealer(201), ClearFake(149), Unknown malware(143), Aisuru(24). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T15:04:05.638000", "created": "2025-12-12T15:20:01.305000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 44, "domain": 15, "URL": 69 }, "indicator_count": 128, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c2491e8755433c8f11f8b", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(205), Unknown Stealer(201), ClearFake(151), Unknown malware(121), Vidar(46). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T14:00:28.387000", "created": "2025-12-12T14:20:01.602000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 58, "domain": 13, "URL": 48 }, "indicator_count": 119, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693bfa616ad2eca1786366b0", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(217), Unknown Stealer(205), ClearFake(155), Unknown malware(127), XWorm(93). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T11:00:40.011000", "created": "2025-12-12T11:20:01.707000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 46, "domain": 15, "URL": 66, "FileHash-SHA256": 3 }, "indicator_count": 130, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693bec51900c3b07073d518e", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(261), Unknown Stealer(205), ClearFake(157), Unknown malware(106), XWorm(93). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T10:01:25.940000", "created": "2025-12-12T10:20:01.665000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 64, "URL": 66, "domain": 14, "FileHash-SHA256": 3 }, "indicator_count": 147, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693bde4194c0883fe15ac523", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(261), Unknown Stealer(205), ClearFake(156), Unknown malware(105), XWorm(93). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T09:02:06.881000", "created": "2025-12-12T09:20:01.689000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 60, "URL": 65, "domain": 14, "FileHash-SHA256": 3 }, "indicator_count": 142, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d28c699221ac852b0d818", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:50:14.026000", "created": "2025-12-13T08:50:14.026000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 166, "domain": 27, "URL": 67 }, "indicator_count": 260, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d266d96e2c6e6c451510f", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:40:13.733000", "created": "2025-12-13T08:40:13.733000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 164, "domain": 27, "URL": 76 }, "indicator_count": 267, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d24177da3496005cd9839", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:30:15.679000", "created": "2025-12-13T08:30:15.679000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 163, "domain": 27, "URL": 77 }, "indicator_count": 267, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d21bd17e795dc753fedb0", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:20:13.487000", "created": "2025-12-13T08:20:13.487000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 162, "domain": 27, "URL": 77 }, "indicator_count": 266, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693d1f65b258525a36742814", "name": "PreCog Sweep - 2025-12-13 08h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-13T08:10:13.202000", "created": "2025-12-13T08:10:13.202000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 161, "domain": 27, "URL": 77 }, "indicator_count": 265, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "172 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c5f36ba47c4826dbd1c24", "name": "PreCog Sweep - 2025-12-12 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T18:30:14.221000", "created": "2025-12-12T18:30:14.221000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 182, "domain": 109, "URL": 73 }, "indicator_count": 364, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c5cdeed8d4cf1bdf23a55", "name": "PreCog Sweep - 2025-12-12 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T18:20:14.695000", "created": "2025-12-12T18:20:14.695000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 181, "domain": 109, "URL": 73 }, "indicator_count": 363, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c5a850bb6e6484a8f4069", "name": "PreCog Sweep - 2025-12-12 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T18:10:13.415000", "created": "2025-12-12T18:10:13.415000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 180, "domain": 109, "URL": 73 }, "indicator_count": 362, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c582f4ec2d49e4a9f7f7a", "name": "PreCog Sweep - 2025-12-12 18h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T18:00:15.006000", "created": "2025-12-12T18:00:15.006000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 146, "URL": 98, "domain": 33 }, "indicator_count": 277, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c55d5cae79b1df3e71ac2", "name": "PreCog Sweep - 2025-12-12 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T17:50:13.247000", "created": "2025-12-12T17:50:13.247000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 145, "URL": 98, "domain": 33 }, "indicator_count": 276, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c537cad3e66a12de074be", "name": "PreCog Sweep - 2025-12-12 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T17:40:12.803000", "created": "2025-12-12T17:40:12.803000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 98, "hostname": 144, "domain": 33 }, "indicator_count": 275, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c512662b72275ca64be85", "name": "PreCog Sweep - 2025-12-12 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T17:30:14.688000", "created": "2025-12-12T17:30:14.688000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 143, "URL": 97, "domain": 33 }, "indicator_count": 273, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4ecdbea3346a04e34bda", "name": "PreCog Sweep - 2025-12-12 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T17:20:13.511000", "created": "2025-12-12T17:20:13.511000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 97, "hostname": 142, "domain": 33 }, "indicator_count": 272, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4c766f67b1bdee5d1432", "name": "PreCog Sweep - 2025-12-12 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T17:10:14.364000", "created": "2025-12-12T17:10:14.364000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 141, "domain": 33, "URL": 96 }, "indicator_count": 270, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4a1e5a39b33a0af2b548", "name": "PreCog Sweep - 2025-12-12 17h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T17:00:14.654000", "created": "2025-12-12T17:00:14.654000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 140, "URL": 95, "domain": 32 }, "indicator_count": 267, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c47c53ebd456c5a434253", "name": "PreCog Sweep - 2025-12-12 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T16:50:13.093000", "created": "2025-12-12T16:50:13.093000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 138, "URL": 95, "domain": 32 }, "indicator_count": 265, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c456ddaf251cdca4a1a38", "name": "PreCog Sweep - 2025-12-12 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T16:40:13.709000", "created": "2025-12-12T16:40:13.709000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 137, "URL": 95, "domain": 32 }, "indicator_count": 264, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4315ae76dc16ad6180c9", "name": "PreCog Sweep - 2025-12-12 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T16:30:13.330000", "created": "2025-12-12T16:30:13.330000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 138, "URL": 95, "domain": 32 }, "indicator_count": 265, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c40bddcf1225f3253f481", "name": "PreCog Sweep - 2025-12-12 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T16:20:13.038000", "created": "2025-12-12T16:20:13.038000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 152, "URL": 95, "domain": 32 }, "indicator_count": 279, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c3e664e1785e79dbf85e4", "name": "PreCog Sweep - 2025-12-12 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T16:10:14.645000", "created": "2025-12-12T16:10:14.645000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 152, "URL": 95, "domain": 32 }, "indicator_count": 279, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c3c0ed184f8fa1aa3a5d2", "name": "PreCog Sweep - 2025-12-12 16h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T16:00:14.517000", "created": "2025-12-12T16:00:14.517000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 95, "hostname": 155, "domain": 32 }, "indicator_count": 282, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c39b5e54f218308835a68", "name": "PreCog Sweep - 2025-12-12 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T15:50:13.711000", "created": "2025-12-12T15:50:13.711000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 154, "domain": 30, "URL": 94 }, "indicator_count": 278, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c375d7674d20343325718", "name": "PreCog Sweep - 2025-12-12 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T15:40:13.187000", "created": "2025-12-12T15:40:13.187000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 153, "domain": 30, "URL": 94 }, "indicator_count": 277, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c3506db80caeeba00227a", "name": "PreCog Sweep - 2025-12-12 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T15:30:14.908000", "created": "2025-12-12T15:30:14.908000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 151, "domain": 30, "URL": 94 }, "indicator_count": 275, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c32adc2912b02d5b21a82", "name": "PreCog Sweep - 2025-12-12 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T15:20:13.556000", "created": "2025-12-12T15:20:13.556000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 149, "domain": 29, "URL": 94 }, "indicator_count": 272, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c3056d3c20b2cb5b27237", "name": "PreCog Sweep - 2025-12-12 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T15:10:14.693000", "created": "2025-12-12T15:10:14.693000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 148, "domain": 29, "URL": 94 }, "indicator_count": 271, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c2dffdea83c2b55466a46", "name": "PreCog Sweep - 2025-12-12 15h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T15:00:15.522000", "created": "2025-12-12T15:00:15.522000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 147, "domain": 29, "URL": 94 }, "indicator_count": 270, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c2ba683fa4f039e656d1d", "name": "PreCog Sweep - 2025-12-12 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T14:50:14.799000", "created": "2025-12-12T14:50:14.799000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 146, "domain": 29, "URL": 94 }, "indicator_count": 269, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c294d1d58f9b2743d856a", "name": "PreCog Sweep - 2025-12-12 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T14:40:13.161000", "created": "2025-12-12T14:40:13.161000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "domain": 29, "URL": 94, "hostname": 145 }, "indicator_count": 268, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c26f4a7023cf422bc3dec", "name": "PreCog Sweep - 2025-12-12 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T14:30:12.679000", "created": "2025-12-12T14:30:12.679000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 93, "domain": 25, "hostname": 145 }, "indicator_count": 263, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c249d6d52b8fd1a78439e", "name": "PreCog Sweep - 2025-12-12 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T14:20:13.271000", "created": "2025-12-12T14:20:13.271000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 93, "hostname": 145, "domain": 25 }, "indicator_count": 263, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c2245f2f8f0243025e119", "name": "PreCog Sweep - 2025-12-12 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T14:10:13.846000", "created": "2025-12-12T14:10:13.846000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 145, "domain": 25, "URL": 71 }, "indicator_count": 241, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c1fefbcce3efc13a751eb", "name": "PreCog Sweep - 2025-12-12 14h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T14:00:15.415000", "created": "2025-12-12T14:00:15.415000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 144, "domain": 25, "URL": 71 }, "indicator_count": 240, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c1d9685de133191c108ae", "name": "PreCog Sweep - 2025-12-12 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T13:50:14.907000", "created": "2025-12-12T13:50:14.907000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 142, "domain": 25, "URL": 71 }, "indicator_count": 238, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c1b3dddd416450a87c862", "name": "PreCog Sweep - 2025-12-12 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T13:40:13.679000", "created": "2025-12-12T13:40:13.679000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 141, "domain": 25, "URL": 71 }, "indicator_count": 237, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c18e72a2692577accfc1a", "name": "PreCog Sweep - 2025-12-12 13h", "description": "Novel threat indicators detected by PreCog Sweep Engine", "modified": "2025-12-12T13:30:15.465000", "created": "2025-12-12T13:30:15.465000", "tags": [ "precog", "automated", "novel-ioc", "c2", "malware" ], "references": [ "https://analytics.dugganusa.com/api/v1/stix/master", "https://github.com/pduggusa/dugganusa-research" ], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 140, "domain": 24, "URL": 71 }, "indicator_count": 235, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "173 days ago ", "is_modified": false, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "references": [ "https://github.com/pduggusa/dugganusa-research", "https://analytics.dugganusa.com/api/v1/stix/master" ], "related": { "alienvault": { "adversary": [], "malware_families": [], "industries": [], "unique_indicators": 0 }, "other": { "adversary": [], "malware_families": [ "" ], "industries": [], "unique_indicators": 108643 } } }, "false_positive": [], "alexa": "http://www.alexa.com/siteinfo/ads360imob.com.br", "whois": "http://whois.domaintools.com/ads360imob.com.br", "domain": "ads360imob.com.br", "hostname": "vendamaiscomthiago.ads360imob.com.br" }, "geo": {}, "geo_ipapicom": {}, "pulse_count": 50, "pulses": [ { "id": "691b8869e00b107fa20d9482", "name": "ThreatFix", "description": "ThreatFix is an effort to publish various details about ransomware variants and ransomware threat actors. ThreatFix advisories include recently and historically observed tactics, techniques, and procedures (TTPs) and indicators of compromise (IOCs) to help organizations protect against ransomware.", "modified": "2026-01-23T11:01:07.175000", "created": "2025-11-17T20:41:11.797000", "tags": [ "", "ransomware", "malware" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [ { "id": "", "display_name": "", "target": null } ], "attack_ids": [], "industries": [], "TLP": "green", "cloned_from": null, "export_count": 8, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "web", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "zlepos384", "id": "103244", "avatar_url": "https://otx.alienvault.com/assets/images/default-avatar.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "FileHash-MD5": 8010, "FileHash-SHA1": 7922, "FileHash-SHA256": 8893, "URL": 57004, "domain": 36018, "hostname": 96473 }, "indicator_count": 214320, "is_author": false, "is_subscribing": null, "subscriber_count": 44, "modified_text": "131 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": true, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693e45938d431f40d5e0fe1a", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 144 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T05:03:31.755000", "created": "2025-12-14T05:05:23.154000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "domain": 9, "hostname": 6 }, "indicator_count": 91, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693e0d4b455894d98940e5b2", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 141 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T01:02:59.421000", "created": "2025-12-14T01:05:15.004000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 198, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dff42b301040a8b4afc64", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-14", "description": "Automated ThreatFox hunt for Unknown malware indicators. 143 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-13T00:05:56.401000", "created": "2025-12-14T00:05:22.280000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 75, "domain": 9, "hostname": 6 }, "indicator_count": 90, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693de31c8d706fb0a8d9cbbf", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T22:01:57.329000", "created": "2025-12-13T22:05:16.726000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693dd50b82d3a9426de10a97", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 161 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T21:02:35.560000", "created": "2025-12-13T21:05:15.469000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 2, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 76, "hostname": 7, "domain": 9 }, "indicator_count": 92, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "141 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693cd7ef8e8a9a68b2dd786f", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-13", "description": "Automated ThreatFox hunt for Unknown malware indicators. 225 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-12T03:00:26.732000", "created": "2025-12-13T03:05:19.234000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 4, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "142 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c757d86870325ab95fca5", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 244 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T20:05:23.417000", "created": "2025-12-12T20:05:17.867000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 1, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c4b4f02bc250f546de8ca", "name": "ThreatFox Hunt: Unknown malware IOCs - 2025-12-12", "description": "Automated ThreatFox hunt for Unknown malware indicators. 243 IOCs collected. Pattern 49 automated intelligence streaming. Reference: https://analytics.dugganusa.com", "modified": "2026-01-11T17:00:19.427000", "created": "2025-12-12T17:05:19.140000", "tags": [ "unknown-malware", "threatfox", "automated-hunt", "pattern-49", "dugganusa" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 3, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "URL": 126, "domain": 11, "hostname": 9 }, "indicator_count": 146, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 }, { "id": "693c32a16bf837f7b07a53b6", "name": "OSINT Volley 2025-12-12 - Cobalt Strike/Unknown Stealer/ClearFake", "description": "Automated OSINT sweep from ThreatFox. Top malware: Cobalt Strike(205), Unknown Stealer(201), ClearFake(149), Unknown malware(143), Aisuru(24). Source: abuse.ch ThreatFox API. Pattern 54: sweep\u2192volley automation.", "modified": "2026-01-11T15:04:05.638000", "created": "2025-12-12T15:20:01.305000", "tags": [ "osint-volley", "threatfox", "automated", "cobalt-strike", "unknown-stealer", "clearfake" ], "references": [], "public": 1, "adversary": "", "targeted_countries": [], "malware_families": [], "attack_ids": [], "industries": [], "TLP": "white", "cloned_from": null, "export_count": 0, "upvotes_count": 0, "downvotes_count": 0, "votes_count": 0, "locked": false, "pulse_source": "api", "validator_count": 0, "comment_count": 0, "follower_count": 0, "vote": 0, "author": { "username": "pduggusa", "id": "371400", "avatar_url": "/otxapi/users/avatar_image/media/avatars/user_371400/resized/80/avatar_3b9c358f36.png", "is_subscribed": false, "is_following": false }, "indicator_type_counts": { "hostname": 44, "domain": 15, "URL": 69 }, "indicator_count": 128, "is_author": false, "is_subscribing": null, "subscriber_count": 197, "modified_text": "143 days ago ", "is_modified": true, "groups": [], "in_group": false, "threat_hunter_scannable": false, "threat_hunter_has_agents": 1, "related_indicator_type": "URL", "related_indicator_is_active": 1 } ], "error": null, "vt": { "error": "VirusTotal rate limit reached. Try again shortly.", "indicator": "https://vendamaiscomthiago.ads360imob.com.br/", "type": "URL" }, "abuseipdb": null, "urlhaus": { "indicator": "https://vendamaiscomthiago.ads360imob.com.br/", "type": "URL", "found": false, "verdict": "clean", "error": null }, "from_cache": true, "_cached_at": 1780517532.6632564 }